Add Community Service Certificate Initials with airSlate SignNow

Add Community Service Certificate initials

[Music] [Applause] [Music] in this video we're going to take a look at how to create user and computer certificates and enable auto enrollment using server 2019 for those that follow my videos and my content you'll probably be aware that i did a similar video as well as an article around how to do this with server 2012 r2 so this is going to be an updated video using server 2019 so the first thing we need to do is we need to create certificate templates so to do that we just go to tools certification authority and then in here we need to go to expand this here and we can see we have certificate templates here so what we'll do is we will um we've got two here that i've created by default so computer and user so what we'll do is we'll copy each of those templates and we'll modify them for what we want so we'll start off with the computer you can see there it just gives you the the general information for that and likewise with user it gives you the general information for that one as well so we want to do is we want to right click on certificate templates and we'll click manage and then we need to find computer and we need to find user we'll start off with the user and we'll click right click and then duplicate template let's click on the generals tab and we'll just give this a new name so we'll give this a name of user modified let's say we can leave the validated period as one year renewal period of six weeks and public certificate in active directory that's fine now if we go to subject name we can leave the option built from this active directory information so what's this it's going to take the active directory information for for the users so to the um fqdn or fully disto english name and we can choose to include the email name in the subject name and we can include um as default you've got the email name and you've got the upn or the user principal name so for the purpose of this demonstration we'll just leave this as it is and then we'll head over now to security what we want to do is want to select the relevant user groups for the domain and select the permissions that are relevant as well so just click on domain users and what we're going to do is we'll click auto enroll i will also select read as well now click on extensions and while on extensions we now need to go to edit we can see that we've got a few policies here so we've got the client authentication encrypting the file system or efs and secure email so what we want to do is for the user we want to add in server authentication so just click add and then...